USN-5666-1: OpenSSH vulnerability
Published Oct 10, 2022
·Updated
It was discovered that OpenSSH incorrectly handled certain helper programs. An attacker could possibly use this issue to arbitrary code execution.
Affected Software
2 affected componentsFixes available
All of the following
ubuntu/openssh-server<1:7.2p2-4ubuntu2.10+esm2
1:7.2p2-4ubuntu2.10+esm2
Ubuntu Ubuntu=16.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/openssh-serverto a version that resolves this vulnerability.Fixed in 1:7.2p2-4ubuntu2.10+esm2
Event History
Oct 10, 2022
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-5666-1?
The severity of USN-5666-1 is critical due to potential arbitrary code execution.
2
How do I fix USN-5666-1?
To fix USN-5666-1, update the openssh-server package to version 1:7.2p2-4ubuntu2.10+esm2 or later.
3
Which systems are affected by USN-5666-1?
USN-5666-1 affects Ubuntu 16.04 with the openssh-server package version prior to 1:7.2p2-4ubuntu2.10+esm2.
4
What could an attacker do by exploiting USN-5666-1?
An attacker could potentially execute arbitrary code on a system vulnerable to USN-5666-1.
5
When was USN-5666-1 published?
USN-5666-1 was published to address the OpenSSH vulnerability.